This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/58B9uYgBM8XNzgBbyhEbVSzRTFM.mft File: 58B9uYgBM8XNzgBbyhEbVSzRTFM.mft (raw, json) Hash identifier: QZWXpfhcWKHlqTdn9U7L3SDaKT+9lUJGTvLAAAJ3Uo8= Subject key identifier: CA:EB:EC:59:2D:5F:2D:6B:98:FF:BF:9D:14:D7:4A:18:68:B6:2A:0B Authority key identifier: E7:C0:7D:B9:88:01:33:C5:CD:CE:00:5B:CA:11:1B:55:2C:D1:4C:53 Certificate issuer: /CN=e7c07db9880133c5cdce005bca111b552cd14c53 Certificate serial: 019B3E356D6CCCD1C344A1BC726E7D847BA5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/58B9uYgBM8XNzgBbyhEbVSzRTFM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/58B9uYgBM8XNzgBbyhEbVSzRTFM.mft Manifest number: 0C44 Signing time: Sun 21 Dec 2025 00:00:47 +0000 Manifest this update: Sun 21 Dec 2025 00:00:47 +0000 Manifest next update: Mon 22 Dec 2025 00:00:47 +0000 Files and hashes: 1: 1-iqnIyKfffTeip77QQglSkGC66k.asa (hash: tm5ocWQ4F8iL11rdh167B46m++zYGle2Ua0389CC5aI=) 2: 3pxtcoitrFP84ablFN0e1N99UbU.roa (hash: 3rHwb/LGbKBgtS++gv9s6PE/pIkC8kqsGTnPOdr75VM=) 3: 58B9uYgBM8XNzgBbyhEbVSzRTFM.crl (hash: Fj8sDfnMxajIoucAFglvUtWx+DfMDp22zzHLk2U/6RI=) 4: 83jnw3_iQXavgLNpPArd0mjD8v0.roa (hash: SHfszJ5S+RcUzQDWjfFykPyoXsOFj+P+O7U1p7lsd+k=) 5: 9TCbC5ZMWTliQOKPmZ8VOSeIZEs.roa (hash: ladwpTnVncQtchwvagqScI9AqnIAoqG+BVd9xXCXOlU=) 6: BOsl0qn4uIqkA_a-sd3d5l-tYXE.asa (hash: WTaPLVm9v1a65g9j7GNkbyW3n2otJVScGC1bf2hl4GA=) 7: DeUytZfI95MWDsuLJPAteUD07Uc.roa (hash: wyHnlO7zWJ+apYnZ3m2Zd+YBK+GTVFGojfzCgOcEpWA=) 8: _sBQ-iEtTw6n3_2GUf1kdKinw6k.roa (hash: 2pQWnwaXMMFBZzZKZwaCBzryPcNsmH6tse3213iQbEg=) 9: hsyRrTmHUFy-dvGlMuWHGJoh8Ws.roa (hash: uXGOwuMsPP7paFlNgchG8Ort4AQoj239eYXxGZv6OVk=) 10: la2dPjbXAEn7TCutV5FDNd87YgY.roa (hash: Cy/GkdDa8H/gyDAs0CMDjYPIaE/yLrgi+H+nowssrsc=) 11: wrGzB70sU_9SIqxlx-1pOzK4ufs.roa (hash: hctgdi4NMknx7R7SWF0OvSDThJO+cXqWTsV2GWgcQfc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/58B9uYgBM8XNzgBbyhEbVSzRTFM.crl rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/58B9uYgBM8XNzgBbyhEbVSzRTFM.mft rsync://rpki.ripe.net/repository/DEFAULT/58B9uYgBM8XNzgBbyhEbVSzRTFM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:35:6d:6c:cc:d1:c3:44:a1:bc:72:6e:7d:84:7b:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7c07db9880133c5cdce005bca111b552cd14c53 Validity Not Before: Dec 21 00:00:47 2025 GMT Not After : Dec 22 00:00:47 2025 GMT Subject: CN=caebec592d5f2d6b98ffbf9d14d74a1868b62a0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:3f:e7:d8:64:3d:13:b6:8f:9b:e8:f0:d2:63: c1:aa:f8:bc:65:12:f5:68:fa:af:6d:94:fe:a0:f7: f8:81:ce:45:5a:30:61:b9:c1:46:3e:4b:8e:66:86: a7:e8:bf:3a:1d:2d:e1:7f:6e:3b:01:0b:e4:7a:85: 61:8c:4d:b9:37:da:13:56:27:8b:1f:8a:8e:73:c0: 8c:a7:27:ec:8b:5c:86:d4:97:86:1e:6a:04:9d:9f: be:e6:01:b3:b5:58:f7:5d:38:e5:47:83:0c:06:00: b3:d6:07:a5:76:b5:fa:91:9d:d9:5c:e2:28:a3:7a: 36:5f:a9:ac:e1:f2:a7:33:70:9b:2b:06:ee:68:1b: 4f:c3:8f:ab:76:a9:58:e0:89:a3:02:f8:48:b5:24: 7f:78:cf:11:90:5f:6e:ce:04:e0:22:d5:d8:97:38: 13:34:34:6c:9d:a6:05:77:b0:9d:4a:be:36:18:7c: fa:ea:75:3b:35:88:48:6e:dc:c1:80:66:28:d0:84: cd:09:fe:b7:b7:28:d9:29:af:63:15:3b:a5:48:44: 1c:e1:c6:d4:ce:c8:65:4e:5b:ef:51:29:90:ef:b7: 02:df:45:40:42:e9:0c:de:a2:74:47:62:91:f4:1a: 43:69:0e:61:4c:51:68:c2:5a:9f:cc:83:7f:34:39: af:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:EB:EC:59:2D:5F:2D:6B:98:FF:BF:9D:14:D7:4A:18:68:B6:2A:0B X509v3 Authority Key Identifier: keyid:E7:C0:7D:B9:88:01:33:C5:CD:CE:00:5B:CA:11:1B:55:2C:D1:4C:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/58B9uYgBM8XNzgBbyhEbVSzRTFM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/58B9uYgBM8XNzgBbyhEbVSzRTFM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/58B9uYgBM8XNzgBbyhEbVSzRTFM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c1:33:40:45:71:53:09:24:d8:64:e1:eb:89:35:9e:0a:0b:34: 9b:06:95:28:0a:1c:5c:a6:4c:36:d6:56:05:da:26:c5:5a:a8: 82:79:8e:c2:d7:04:81:55:06:1b:16:0f:73:84:be:0a:7f:0a: 53:8b:21:01:78:1a:4e:19:14:47:fd:19:90:20:15:8b:b8:6d: 56:6b:46:e3:a7:82:ed:54:b5:fe:79:33:64:29:96:c9:33:c0: b7:93:67:8f:6f:42:9e:e9:9b:cd:8e:7f:81:5c:25:5e:a8:d0: 04:41:fe:dc:d5:7e:40:d5:43:ed:47:e8:ac:51:d2:fb:e7:9e: 4a:7c:c4:18:52:06:dc:97:67:43:da:c1:54:6c:8a:3a:a9:09: 90:92:c9:79:22:50:90:66:14:79:6b:8b:5e:5b:e8:ee:5c:ea: 45:3b:57:07:e2:b0:af:82:84:ec:f8:18:c2:cd:07:b8:cc:82: e8:f2:ae:b1:16:3f:a2:b3:ca:4d:93:fc:0b:9b:90:f4:e2:3f: 23:0a:7c:68:92:57:7d:48:06:8e:91:c3:ad:82:77:cd:39:31: b8:2a:5e:26:69:2d:75:1e:32:d1:1c:2b:2e:68:65:0f:cf:ef: 07:b3:21:7a:1b:68:4f:1a:b3:75:75:d0:83:03:cc:8a:7a:8d: 04:59:29:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+NW1szNHDRKG8cm59hHulMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3YzA3ZGI5ODgwMTMzYzVjZGNlMDA1YmNhMTExYjU1MmNk MTRjNTMwHhcNMjUxMjIxMDAwMDQ3WhcNMjUxMjIyMDAwMDQ3WjAzMTEwLwYDVQQD EyhjYWViZWM1OTJkNWYyZDZiOThmZmJmOWQxNGQ3NGExODY4YjYyYTBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkj/n2GQ9E7aPm+jw0mPBqvi8ZRL1 aPqvbZT+oPf4gc5FWjBhucFGPkuOZoan6L86HS3hf247AQvkeoVhjE25N9oTVieL H4qOc8CMpyfsi1yG1JeGHmoEnZ++5gGztVj3XTjlR4MMBgCz1geldrX6kZ3ZXOIo o3o2X6ms4fKnM3CbKwbuaBtPw4+rdqlY4ImjAvhItSR/eM8RkF9uzgTgItXYlzgT NDRsnaYFd7CdSr42GHz66nU7NYhIbtzBgGYo0ITNCf63tyjZKa9jFTulSEQc4cbU zshlTlvvUSmQ77cC30VAQukM3qJ0R2KR9BpDaQ5hTFFowlqfzIN/NDmvxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMrr7FktXy1rmP+/nRTXShhotioLMB8GA1UdIwQY MBaAFOfAfbmIATPFzc4AW8oRG1Us0UxTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNThCOXVZZ0JNOFhOemdCYnloRWJWU3pSVEZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi84Y2RkNDktYzA5NC00YzZhLTkxOGMt MGFhNDYzY2RmY2EwLzEvNThCOXVZZ0JNOFhOemdCYnloRWJWU3pSVEZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi84Y2RkNDktYzA5NC00YzZhLTkxOGMtMGFhNDYzY2RmY2Ew LzEvNThCOXVZZ0JNOFhOemdCYnloRWJWU3pSVEZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwTNARXFT CSTYZOHriTWeCgs0mwaVKAocXKZMNtZWBdomxVqognmOwtcEgVUGGxYPc4S+Cn8K U4shAXgaThkUR/0ZkCAVi7htVmtG46eC7VS1/nkzZCmWyTPAt5Nnj29CnumbzY5/ gVwlXqjQBEH+3NV+QNVD7UforFHS++eeSnzEGFIG3JdnQ9rBVGyKOqkJkJLJeSJQ kGYUeWuLXlvo7lzqRTtXB+Kwr4KE7PgYws0HuMyC6PKusRY/orPKTZP8C5uQ9OI/ Iwp8aJJXfUgGjpHDrYJ3zTkxuCpeJmktdR4y0RwrLmhlD8/vB7MhehtoTxqzdXXQ gwPMinqNBFkprw== -----END CERTIFICATE-----Generated at Sun Dec 21 07:20:05 2025 by rpki-client